Privacy Policy

1. Introduction

Randomly (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our anonymous chat platform.

2. Information We Collect

We collect the following information:

• Phone number — Used for account verification via WhatsApp OTP. We do not share your phone number with other users.
• First name — Collected during profile setup. This is never shown during anonymous conversations.
• Organization selection — Used to match you with people from the same organization.
• Profile photo — Optional. Stored securely and only visible in non-anonymous contexts.
• Usage data — Session duration, feature usage, and interaction patterns collected via Google Analytics.

3. Anonymity Guarantees

Your identity is protected during chat sessions. Each session assigns you a random anonymous name (e.g., “Blue Panda”). Your real name, phone number, and profile photo are never shared with your chat partner unless you explicitly choose to reveal your first name using the identity reveal feature.

4. How We Use Your Information

• To verify your identity and prevent abuse
• To match you with users from your organization
• To provide and improve our services
• To enforce our community guidelines and terms of service
• To analyze usage patterns and improve user experience

5. Data Retention

Chat messages are temporarily buffered in memory during active sessions for moderation purposes. Messages are not permanently stored after a session ends. Session metadata (duration, timestamps) is retained for platform analytics and safety. Account data is retained until you request deletion.

6. Third-Party Services

We use the following third-party services:

• Firebase — Phone number OTP verification for account authentication
• Google Analytics — Anonymous usage analytics with IP anonymization enabled
• Vercel — Hosting and edge network delivery
• Amazon Web Services — Secure file storage for profile photos

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS), secure authentication tokens, rate limiting, and access controls. Video and audio calls use peer-to-peer WebRTC connections and are not recorded or stored by our servers.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through the platform's reporting system or reach out to our support team.